
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/8156f173-c530-3489-b066-72053b3b7ac9.roa
File: 8156f173-c530-3489-b066-72053b3b7ac9.roa (raw, json)
Hash identifier: U6/RcSLZ94/ID6zCYdcqOLG/PL6crTH0v0q/fwPtukE=
Subject key identifier: 33:F2:DC:C2:7D:68:45:10:69:8B:BD:A4:84:37:04:51:38:91:E8:21
Certificate issuer: /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial: 010D0C9F4328584D60E508C70DF5CC8B931C0CC0
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/8156f173-c530-3489-b066-72053b3b7ac9.roa
Signing time: Fri 03 Apr 2026 01:00:24 +0000
ROA not before: Fri 03 Apr 2026 01:00:24 +0000
ROA not after: Thu 02 Jul 2026 01:00:24 +0000
asID: 26863
IP address blocks: 104.129.132.0/23 maxlen: 23
104.129.132.0/24 maxlen: 24
104.129.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 15 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:60:e5:08:c7:0d:f5:cc:8b:93:1c:0c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Validity
Not Before: Apr 3 01:00:24 2026 GMT
Not After : Jul 2 01:00:24 2026 GMT
Subject: CN=998b1c90-faea-4b19-801e-2c90c7e1a601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1a:1c:7b:1f:19:74:db:4f:cb:5d:8e:34:7e:
80:26:b8:b9:3c:27:de:6b:68:b4:62:ee:e2:bd:1e:
4b:b8:e1:8d:2a:c7:e9:3f:38:4d:d5:26:5a:5c:bd:
0f:9e:d2:25:9b:19:d7:32:15:1b:cd:58:ed:ea:f3:
55:21:f7:6c:e6:0d:29:59:67:d9:82:a9:3e:a0:7b:
0d:f4:11:93:fd:ce:75:4e:08:44:81:29:fa:1d:11:
68:d6:e7:5c:9b:5c:98:ed:db:10:67:52:0f:3f:9c:
15:0d:e9:8a:d5:01:7e:ec:af:d3:23:1e:d4:2f:ff:
e6:33:5b:4b:a4:ba:94:09:df:91:d3:2d:b7:b0:a9:
60:bf:8f:84:73:23:5c:70:a9:ff:78:dd:f2:31:cb:
6c:1c:1c:6a:48:20:0b:f1:14:0e:e7:2b:2c:a9:ca:
91:9a:d8:f0:2c:a4:c4:fb:99:f7:cd:b4:e6:b7:f1:
3f:52:42:82:1e:7c:91:3c:66:6b:b7:fc:1f:b1:3a:
7b:5d:c6:29:58:bd:b7:53:75:24:48:9a:65:19:07:
e5:bd:c3:ec:9f:7c:6b:72:2f:b6:65:87:a0:85:ee:
fb:bc:42:32:ce:cb:f4:1c:39:12:54:da:7f:d5:aa:
56:b2:16:83:21:aa:b7:d2:fa:c9:75:6f:f2:a3:a8:
7a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F2:DC:C2:7D:68:45:10:69:8B:BD:A4:84:37:04:51:38:91:E8:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/8156f173-c530-3489-b066-72053b3b7ac9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
X509v3 Authority Key Identifier:
keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
sbgp-ipAddrBlock: critical
IPv4:
104.129.132.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:06:da:60:e2:d0:7a:df:af:38:ad:b1:28:55:78:4f:5f:1b:
14:ec:c9:9e:90:95:e3:fa:51:03:9a:70:82:58:7d:50:5e:6a:
35:e9:0c:a8:77:01:14:76:50:cb:ed:9b:2a:39:5b:06:7f:3e:
a5:44:ea:22:e4:f1:13:f3:16:ff:d2:6d:06:05:ca:dc:9f:3c:
b9:5b:25:d7:55:83:77:f8:f5:36:2d:eb:96:62:6d:da:ab:bf:
20:13:ef:4f:e0:42:dc:b8:df:08:c6:e1:4c:35:6e:96:b6:91:
f3:c7:6c:d7:11:5d:a8:69:75:6e:4a:c6:61:92:d8:31:e2:07:
db:0f:85:f9:fd:cf:84:d9:63:c2:b1:f9:1d:49:5b:89:7c:64:
41:c1:b3:49:4c:eb:28:89:c0:4c:b4:38:3f:a9:c0:35:c3:87:
df:8d:54:dd:e3:28:ea:2b:9f:d5:f8:a3:ad:f8:5e:fb:5e:60:
fe:53:d9:97:66:15:b0:19:d7:12:1a:13:96:1b:3a:d2:a1:8f:
00:d4:8d:58:56:05:b7:fd:04:7a:27:34:bc:28:4f:9d:8b:f7:
18:d7:03:4d:10:40:c0:4a:b1:ac:e2:e6:a7:e3:13:a2:00:b4:
4a:c8:e5:39:f3:67:13:ad:3c:88:f8:f8:82:e7:3a:5c:bf:80:
61:0f:58:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5QjHDfXMi5McDMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFjMTllNTctYTZmNS00YzQ4LWI0ZGYtYjhkNDJkN2I3
NDgzMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk
OTk4YjFjOTAtZmFlYS00YjE5LTgwMWUtMmM5MGM3ZTFhNjAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRocex8ZdNtPy12ONH6AJri5PCfea2i0Yu7i
vR5LuOGNKsfpPzhN1SZaXL0PntIlmxnXMhUbzVjt6vNVIfds5g0pWWfZgqk+oHsN
9BGT/c51TghEgSn6HRFo1udcm1yY7dsQZ1IPP5wVDemK1QF+7K/TIx7UL//mM1tL
pLqUCd+R0y23sKlgv4+EcyNccKn/eN3yMctsHBxqSCAL8RQO5yssqcqRmtjwLKTE
+5n3zbTmt/E/UkKCHnyRPGZrt/wfsTp7XcYpWL23U3UkSJplGQflvcPsn3xrci+2
ZYeghe77vEIyzsv0HDkSVNp/1apWshaDIaq30vrJdW/yo6h6owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDPy3MJ9aEUQaYu9pIQ3BFE4keghMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMx
OWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0MmQ3Yjc0ODMvODE1NmYxNzMtYzUzMC0z
NDg5LWIwNjYtNzIwNTNiM2I3YWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzFjMTllNTctYTZmNS00YzQ4LWI0
ZGYtYjhkNDJkN2I3NDgzLzMxYzE5ZTU3LWE2ZjUtNGM0OC1iNGRmLWI4ZDQyZDdi
NzQ4My5jcmwwHwYDVR0jBBgwFoAU/pJi5eJ2pwPKSRroNOSF02JXoFgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMxOWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0
MmQ3Yjc0ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIGEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAYG2mDi0HrfrzitsShVeE9fGxTsyZ6QleP6UQOacIJYfVBeajXpDKh3
ARR2UMvtmyo5WwZ/PqVE6iLk8RPzFv/SbQYFytyfPLlbJddVg3f49TYt65Zibdqr
vyAT70/gQty43wjG4Uw1bpa2kfPHbNcRXahpdW5KxmGS2DHiB9sPhfn9z4TZY8Kx
+R1JW4l8ZEHBs0lM6yiJwEy0OD+pwDXDh9+NVN3jKOorn9X4o634XvteYP5T2Zdm
FbAZ1xIaE5YbOtKhjwDUjVhWBbf9BHonNLwoT52L9xjXA00QQMBKsazi5qfjE6IA
tErI5TnzZxOtPIj4+ILnOly/gGEPWOw=
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:34:17 2026 by rpki-client